Selling a home creates a security problem that ordinary alarm advice does not cover. An open house deliberately invites strangers inside, asks the owner to leave, exposes room layouts and valuables, and gives several people temporary control over doors, lights, locks, cameras, and alarm modes. The goal is not to make a showing feel hostile. It is to keep access deliberate, protect private data, preserve an accurate handoff record, and return the property to a known secure state after the last visitor leaves.
This checklist is for owner-occupied homes, vacant listings, apartments, and houses managed by an agent. It does not replace local real-estate, surveillance, disclosure, tenancy, fire, or emergency-access rules. Agree in writing who is responsible for keys, alarm modes, visitor supervision, cameras, closing checks, and incident escalation before anyone advertises the showing.
Open-house security at a glance
| Control | Before doors open | During the showing | After the last visitor |
|---|---|---|---|
| Access | Issue one named, time-limited code or one documented key | Keep one staffed public entrance; block private and service doors | Revoke codes, count keys, lock every exterior opening |
| Alarm | Choose the exact disarmed or bypassed zones | Keep smoke, leak, panic, and excluded-area protection active where safe | Clear bypasses, restore the agreed mode, confirm all zones ready |
| Cameras | Confirm lawful placement, notice, audio settings, and viewer list | Do not place cameras in bathrooms, bedrooms used for changing, or other private spaces | Review only if needed, restrict exports, restore normal privacy modes |
| Property | Remove medicine, mail, keys, documents, devices, and portable valuables | Keep visitors in supervised routes and record exceptions | Run a room-by-room closeout and document damage or missing items |
| Evidence | Synchronize clocks and prepare an incident form | Record entry count and unusual events without collecting excess personal data | Preserve original files and timestamps only when an incident justifies it |
1. Assign one accountable showing owner
One named person should own the security state from the first unlock to the final arm. That person may be the listing agent, owner, property manager, or a documented delegate. A group text is not a control. Write the name, phone number, backup contact, arrival time, opening state, expected closing time, and the exact point at which responsibility transfers.
The showing owner should have authority to pause entry, close the event, call the owner, and escalate a safety issue. They should also know which door is the public entrance, which rooms are excluded, which alarms remain active, and how to leave without defeating fire or emergency egress.
- Owner: approves access, camera policy, excluded rooms, and the final security state.
- Showing owner: opens, supervises, counts access credentials, closes, and signs the handoff.
- Door host: manages arrival and departure at the public entrance.
- Floor checker: inspects rooms, windows, secondary doors, and hazards before closing.
- Backup: takes over only through an explicit time-stamped handoff.
2. Build a property and access map
Mark every exterior door, garage connection, basement exit, balcony or patio door, accessible window, gate, lockbox, alarm keypad, hub, camera, smoke alarm, leak sensor, and utility shutoff. Label the single public entrance and the planned visitor path. The map should also mark rooms that remain locked or excluded.
Do not publish the security map with the listing. Keep it in the private operating record. Public photos should be checked for visible alarm codes, key tags, Wi-Fi labels, serial numbers, calendars, family names, school details, vehicle plates, medication, mail, and reflections that reveal rooms outside the intended frame.
3. Remove data and portable value before hiding it
A drawer is not a safe boundary during an open house. Remove passports, checks, spare keys, prescription medicine, jewelry, firearms, small electronics, backup drives, tax records, invoices, client files, password notebooks, and mail. Log out of computers, TVs, tablets, displays, and smart speakers. Turn off notification previews on devices left in view.
Do not rely on a camera to compensate for leaving sensitive items accessible. Prevention is cleaner than trying to identify a visitor after the fact. If a device must remain for staging, use a guest profile, remove saved payment methods, disable microphones where appropriate, and verify that no private photo or calendar rotation can appear.
4. Create temporary access with an automatic end
Prefer a named, time-limited credential over a shared household code. Set the start shortly before the showing and the end shortly after the planned close. Test the credential at the actual door before advertising the event. Record who received it, how it was sent, the permitted door, and who will revoke it.
If the property uses a mechanical key or lockbox, record key count, lockbox location, code recipient, opening time, and return check. Never leave an emergency key in the public path. A key handed to a substitute agent requires a written handoff, not an assumption.
For a broader access workflow, use the temporary access code removal checklist and the guest access guide.
5. Choose alarm zones instead of disabling everything
An open house may require the public entry and visitor route to be disarmed, but that does not mean every safety and security function should be off. Document the exact state for entry sensors, interior motion, garage, basement, excluded rooms, smoke, carbon monoxide, water, panic, glass break, sirens, and monitoring.
Never improvise around life-safety devices. If a detector, monitored zone, or emergency path cannot remain in its normal state, the showing owner should understand the consequence and the restoration step. Keep a screenshot or written state record immediately before opening, but do not share it publicly.
6. Set camera and audio rules before visitors arrive
Camera use during a showing raises privacy, disclosure, employment, tenancy, and audio-recording questions. Check the rules that apply to the property and obtain professional advice where needed. If cameras remain on, disclose them as required, limit them to legitimate areas, and name the people allowed to view or export footage.
Do not place or operate cameras in bathrooms or other spaces where privacy is reasonably expected. Audio laws can differ from video laws, so do not assume a microphone is acceptable because a camera is visible. Consider turning off audio recording and using privacy zones where lawful operation still requires masking a neighbor, sidewalk, or private room.
Use the security camera privacy guide and the camera privacy-zone guide to document the boundary.
7. Make the visitor route easy to supervise
Use one staffed entrance and make the intended route obvious with lighting, open interior doors, and simple signs. Keep garages, workshops, utility rooms, attics, crawlspaces, locked storage, balconies with hazards, and occupied private areas outside the route unless they can be supervised safely.
A door host should know roughly how many people are inside. The purpose is safety and closeout, not intrusive profiling. Avoid collecting identification or contact data unless there is a legitimate, disclosed reason and a retention rule. The host should also prevent tailgating into excluded areas and pause entry if supervision is stretched.
8. Protect the network and smart-home controls
Do not give visitors the household Wi-Fi password. If guest connectivity is necessary, use a separated guest network with client isolation where available and no access to hubs, cameras, storage, printers, or administration pages. Remove QR codes or labels that reveal primary credentials.
Check that wall tablets, voice assistants, TVs, and smart displays cannot expose camera feeds, door controls, alarm modes, personal contacts, deliveries, or routines. Lock admin apps, remove remembered browsers, and review active sessions after the event. The trusted-device and session audit gives a step-by-step closeout.
9. Prepare for internet, power, and phone failure
The showing plan must still work if the app will not load, the agent’s phone dies, the lock is offline, or the property loses internet. Write the mechanical entry method, local arming method, hub and router power locations, safe exit route, backup contact, and the point at which the event stops.
Do not discover the fallback while visitors are inside. Test the mechanical key, keypad, local siren state, and closing procedure before the event. If the only authorized closer cannot lock and verify the property without cloud access, that is a launch blocker.
10. Run a controlled opening check
- Photograph or record the starting condition of exterior doors, accessible windows, and staged rooms.
- Count keys, fobs, remotes, and temporary codes.
- Confirm excluded rooms are locked and emergency exits remain usable.
- Verify the chosen alarm zones and life-safety devices.
- Test the public entrance credential and mechanical fallback.
- Check lighting, trip hazards, pets, pools, balconies, and other visitor risks.
- Confirm camera notice, audio setting, viewer list, and privacy zones.
- Start the visitor-count and exception log.
11. Use a closing sweep that cannot be skipped
The closing sweep should be a written sequence, not a casual walk-through. Start at the farthest room and move toward the final exit. Two people should complete the sweep when practical: one checks, the other records.
- Confirm every visitor and worker has left.
- Inspect excluded rooms for forced entry or changed state.
- Check windows, patio doors, garage doors, gates, basement exits, and balcony doors.
- Check water, cooking, fireplaces, candles, HVAC overrides, lights, and trip hazards.
- Count keys, remotes, fobs, and lockbox contents.
- Revoke or expire showing codes and verify they no longer unlock the door.
- Clear temporary bypasses and restore the agreed alarm mode.
- Confirm the app shows all expected zones ready or armed.
- Restore normal camera privacy, alert, and recording settings.
- Send the owner a signed time-stamped handoff with exceptions.
12. Handle an incident without contaminating the record
If property is missing, a room was entered, a lock was damaged, or a safety event occurred, stop changing the scene unless needed to protect people or prevent further damage. Record who discovered it, exact time, location, starting condition, and actions taken. Preserve original footage or event exports rather than editing or repeatedly forwarding clips.
Do not accuse a visitor in public or publish images from the event. Follow the owner, broker, insurer, platform, and local authority process that applies. Restrict access to the incident file and define when it will be deleted. The camera evidence export checklist helps preserve timestamps and originals.
45-minute open-house acceptance test
- Minutes 0-5: Review the private map, named roles, public entrance, excluded rooms, and stop conditions.
- Minutes 5-10: Test the temporary credential, mechanical fallback, and key or lockbox count.
- Minutes 10-15: Set the planned alarm state and verify life-safety and excluded-area zones.
- Minutes 15-20: Check camera notice, audio, privacy zones, viewer access, and device screens.
- Minutes 20-25: Walk the visitor route and test door-host sight lines, lighting, and hazards.
- Minutes 25-30: Simulate an offline phone or internet failure and complete a safe local close.
- Minutes 30-35: Run the room-by-room sweep, key count, window check, and credential revocation.
- Minutes 35-40: Restore alarm, alerts, camera settings, and ordinary household access.
- Minutes 40-45: Complete the signed handoff and record every exception with an owner and deadline.
Launch blockers
- No named person owns opening and closing.
- The public entrance cannot be separated from private or unsafe areas.
- A shared permanent alarm or lock code is the only access method.
- The closer cannot lock and verify the property during an internet outage.
- Keys, medicine, documents, firearms, or portable valuables remain accessible.
- Camera or audio use has not been checked against applicable rules.
- Life-safety devices or emergency egress would be defeated.
- There is no written closing sweep or owner handoff.
FAQ
Should the alarm be fully disabled during an open house?
Usually the safer plan is to document the exact public route and change only the zones required for that route. Keep life-safety and excluded-area protection in the appropriate state, then clear every bypass during closeout.
Can security cameras record an open house?
That depends on the property, camera location, audio setting, disclosure, and applicable law or policy. Check the rules before the event, avoid private spaces, limit viewers, and collect no more footage than the legitimate purpose requires.
Is a lockbox enough access control?
A lockbox can be part of the plan, but it still needs a named recipient, code-handling rule, key count, return check, and code change after exposure. A time-limited named credential gives a cleaner audit trail when the door and platform support it.
What should happen immediately after the showing?
Complete the room and opening sweep, count credentials, revoke temporary access, clear bypasses, restore the alarm and camera states, inspect for damage or missing property, and send the owner a signed time-stamped handoff.
How should a vacant listing differ?
A vacant listing needs explicit power, internet, HVAC, leak, freeze, fire, key, and after-hours response ownership. It also needs a tested local closing method because no resident will notice a failed lock, open window, or offline hub later that evening.
